Does it escape data by default? It appear to be a low-priority for the author in the issues.